
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
File: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft (raw, json)
Hash identifier: YMmAXyBxhEGNSBGOdPJlbD0DngQXutMU2nJOeqpMRmQ=
Subject key identifier: 5D:A1:88:0F:27:24:D6:9B:75:76:F9:F4:69:7F:04:0D:76:4A:B2:CD
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Certificate issuer: /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial: 5586FB3FE781B6B038990D3DA16DA396606B4624
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
Manifest number: B2
Signing time: Fri 24 Jul 2026 11:41:06 +0000
Manifest this update: Fri 24 Jul 2026 11:36:06 +0000
Manifest next update: Sat 25 Jul 2026 14:09:06 +0000
Files and hashes: 1: AS141679.roa (hash: +Dz+vmsU4Nyyvwcx+gRYUKBEeW5WRorKlfoJ/42yBPw=)
2: AS0.roa (hash: 132zAU1ahbknkNfBYBXQHL/eCue+m6AOBrdUkC7GbYY=)
3: AS4847.roa (hash: 3rkjW99xQWcKDBNK98Xl6QzkJQaB+U43s7sVMj+RwZA=)
4: AS9308.roa (hash: yftVhdAdhOlgvCg9H9SqFVvRoFbUFos16+3UvIPNuZo=)
5: AS18244.roa (hash: 5yJK4ELO+Ql7zMnruxm9AyXZ6E0mJAXs2fYYGtt7U6s=)
6: AS56020.roa (hash: 0sLTu+DPLeyeHTFssSu3l6BgQB8sTAdWzngp4fBzNf4=)
7: AS4835.roa (hash: jAlH6Xn9Wx5euSm8I4X3tFNqFODKHPGDOqig5p/XK0k=)
8: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl (hash: op0F2mKMx4QCtip+WiIpVsjIMoE66YAk34XJs340SxQ=)
9: AS59020.roa (hash: /Pd1x3KaSGQFTXTyZbDS1WOjjkXg/3ewVYnbuFdYmwE=)
10: AS17622.roa (hash: PlKFHLxhO02lNPofzh4875427lXAWURw4U69Gq37PDM=)
11: AS4811.roa (hash: ddTKO1AsNR1SULkjlm2Hn5h6NSHZWKPAKCykA8E69zo=)
12: AS4808.roa (hash: u9OQxrqhpl1T/0ARzRa6lSxGFhl35YXPeECNJjqNd3M=)
13: AS17428.roa (hash: e/ULKElOqavWoA242IT/ZZxzH9PHsVAXBwW95iPT/jU=)
14: AS133111.roa (hash: wczUjdPp/Uwb5rWXi6oHegyjpDQrvqpc3CUSK3r89BE=)
15: AS136958.roa (hash: es7Px72aZsegKB/zlZjsZawH5pspdJD+M95b+DUVsMk=)
16: AS56040.roa (hash: HmwkCKoBQAU0uWAz5pjtRSJjSvqZi0caB0vR01UCqYc=)
17: AS56048.roa (hash: 5zXzSkrBQUFfid6aK1Hyf4IH0zjb8rUH3Vawr//Qfho=)
18: AS24400.roa (hash: 6koc0r+8oNvvJQ2n6u3kgNbZRGNkhF9vXGd/vCdqpYw=)
19: AS58466.roa (hash: 2DFqjnyNEv+uIPb/Uz6u1okUeW1cxPg4G+ffDatksUE=)
20: AS9808.roa (hash: 9DHAOxqPuZWJZQUPJlPeIiLta+TaGPyXD7TDGW80KoU=)
21: AS9802.roa (hash: 4/kRC4vWJ83omtig7t5aCQ+XqmsWSbaprpXcANd7oSg=)
22: AS133119.roa (hash: cMFfyh0zqTClFl0ii2ZoZ1a+PgYVLblIHc1vHK0hAZs=)
23: AS23724.roa (hash: T0fAwl6wYamPJGnxn4dx30kfD3ZCVW9sUQOvSfYJGI0=)
24: AS17621.roa (hash: wfLodr6aTTmW76SpdHD4FwYka5Izs6CtYx4KwIUOG8I=)
25: AS56046.roa (hash: mI1nt0SayxXQElAcu/cyI1exRhs6Pf9DcnVs45ciUq8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:86:fb:3f:e7:81:b6:b0:38:99:0d:3d:a1:6d:a3:96:60:6b:46:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Validity
Not Before: Jul 24 11:36:06 2026 GMT
Not After : Jul 25 14:09:06 2026 GMT
Subject: CN=5DA1880F2724D69B7576F9F4697F040D764AB2CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:ba:8a:e1:69:52:e2:2d:33:2f:bd:10:7e:
26:74:36:50:ea:5a:79:54:89:cc:a1:da:d8:e4:0d:
c3:b7:74:b2:50:d3:7e:c7:74:5a:51:1c:ef:3e:81:
78:43:b1:38:75:aa:29:eb:83:35:9f:2d:be:db:0e:
e3:b1:45:1d:9b:be:de:a5:8f:77:55:7d:8a:50:59:
6e:34:14:07:e7:7c:e2:5f:f3:83:25:5d:45:fe:f8:
c2:04:93:c4:e5:6e:9b:a0:b9:4c:1e:00:ca:b6:8c:
31:aa:09:75:99:c0:18:80:8f:84:e4:46:d0:7e:c5:
4f:b8:e1:b3:f2:37:46:83:d0:9d:03:de:e8:8b:b8:
44:fb:d2:79:49:7b:f2:e1:e2:35:51:f1:e4:5d:2e:
ba:37:f1:b4:0d:fa:f8:12:80:99:c4:c9:bd:e1:b9:
0c:cb:ea:50:32:65:68:df:68:ed:1c:5f:82:eb:9f:
14:dd:f7:62:db:42:b3:de:a7:25:44:cb:0f:a7:7a:
b6:f7:e0:5e:ad:26:35:8b:03:d0:bb:6f:13:e1:8e:
ca:70:61:67:bb:35:60:bd:b0:01:08:e0:48:27:e8:
54:9d:63:68:13:db:a4:65:a1:b6:c5:36:69:85:21:
b8:76:4c:40:af:31:a8:5a:4e:c4:c3:63:df:36:21:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A1:88:0F:27:24:D6:9B:75:76:F9:F4:69:7F:04:0D:76:4A:B2:CD
X509v3 Authority Key Identifier:
keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6d:af:69:be:ee:c6:5c:f3:75:34:98:1b:f9:c6:b4:18:86:
c0:1d:eb:ef:b7:14:64:72:41:3c:66:a6:3f:c7:31:60:e7:c3:
b1:f8:9b:a2:67:8a:5a:3d:5c:e7:e9:69:88:35:9b:7f:0a:a1:
53:ba:6d:4e:87:69:36:be:74:46:bd:1a:a2:c1:ad:3e:48:52:
a8:a0:b3:86:b0:e5:f0:63:2d:68:da:67:f7:69:18:e5:21:51:
99:d7:9e:c1:27:e1:60:00:f6:ff:5b:a9:1a:1e:06:cb:08:10:
2a:7d:16:b9:44:29:de:e5:01:26:b1:cd:ff:d1:c1:ee:d9:27:
4c:9e:c4:1d:26:5a:a6:a1:8e:e4:d4:8d:ed:61:4d:d1:d1:1d:
5f:da:cc:b6:90:ac:21:3f:97:3e:17:eb:f5:9b:ed:b2:db:38:
46:af:90:aa:4b:d5:93:e9:c4:82:19:b2:ab:1e:22:70:4a:7b:
7a:2e:39:41:89:9d:22:8d:e6:1b:2b:a8:cc:af:7e:4c:9d:e8:
92:50:d7:73:5c:6d:11:c3:91:21:60:be:66:06:1c:84:8b:b4:
a2:0b:d1:0b:80:26:d9:06:c5:cd:32:a0:25:1b:2d:0a:f8:4f:
b6:e1:fd:0e:e4:95:03:c4:0c:c1:a1:c2:75:02:cc:ae:bb:ff:
e7:90:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:02 2026 by rpki-client